ab080c2216671d303dd2673f850c7106 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab080c2216671d303dd2673f850c7106
Size

10KB
MD5

ab080c2216671d303dd2673f850c7106
SHA1

46ee3f43a11f3870cb194fb7098935e2a26ce564
SHA256

e1c5b28b4bb57e53ea4b9b2b46c181f6fbd05e532cf060cb36a5faff0951f936
SHA512

83cb3f637200b5833a43307ff40640eb18b3e3e5914df1186198d6e2dfe91d7e762bdf06e523b21d0e34b592b53dc4b087d0252401b644f1a0c43631cb726536
SSDEEP

96:JxHKW9pZbG1UwKOfuJRpMJK9dUkCQp5h4Mf1XTlRR4hoydAlp4hfSg9o4Ndb67:fHKgpZK6EK92pu11ZRS4I6kN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab080c2216671d303dd2673f850c7106

Files

ab080c2216671d303dd2673f850c7106
.exe windows:4 windows x86 arch:x86

3334145017ab2cc3db2b22c3ef4d9457

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrA
StrStrIA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTickCount
Sleep
lstrcatA
lstrcpyA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

comctl32

GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE